Overview

overview

10

Static

static

3

adb052afc3...18.dll

windows7-x64

10

adb052afc3...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    adb052afc3a5dcef371014ee6c301e2f_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240615-k4lkhsycrq

  • MD5

    adb052afc3a5dcef371014ee6c301e2f

  • SHA1

    51ddea9f9dba70af190e6b9eb7dea696398ea3e1

  • SHA256

    27549a91bec864f1cc2342341759e484b8ae9e3ee278fb310739cd1a088bab42

  • SHA512

    5cab08d141e8b2d2e0bec90477337f0fd2181e999a3a195c395d1da032da0a22b5ca043a2b55afda339d7682f39d20171eac1cd9647bf6f4f042ddcddb731b76

  • SSDEEP

    49152:SnAQqMSPbcBVQej/1INczcLh2+dnOscK:+DqPoBhz1aczcLh2+dnOscK

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      adb052afc3a5dcef371014ee6c301e2f_JaffaCakes118

    • Size

      5.0MB

    • MD5

      adb052afc3a5dcef371014ee6c301e2f

    • SHA1

      51ddea9f9dba70af190e6b9eb7dea696398ea3e1

    • SHA256

      27549a91bec864f1cc2342341759e484b8ae9e3ee278fb310739cd1a088bab42

    • SHA512

      5cab08d141e8b2d2e0bec90477337f0fd2181e999a3a195c395d1da032da0a22b5ca043a2b55afda339d7682f39d20171eac1cd9647bf6f4f042ddcddb731b76

    • SSDEEP

      49152:SnAQqMSPbcBVQej/1INczcLh2+dnOscK:+DqPoBhz1aczcLh2+dnOscK

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3241) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks